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Secure communication based on message encryption might be performed by combining the message 
with controlled noise (called pseudo-noise) as performed in Spread-Spectrum communication used 
presently in Wi-Fi and Smartphone Telecommunication systems. Quantum communication based 
on entanglement is another route for securing communications as demonstrated by several important 
experiments described in this work. The central role played by the photon in unifying the description 
of Classical and Quantum noise as major ingredients of secure communication systems is highlighted 
and described on the basis of the classical and quantum fluctuation dissipation theorems. 


I. INTRODUCTION 

Secure communication based on message encryption 
with controlled noise (pseudo-noise or PN) started with 
the work of the actress-engineer Hedy Lamarr and her 
husband-pianist Georges Antheil in 1941 who were in¬ 
terested in military communications during World War 
II. 

Lamarr invented frequency hopping to prevent an in¬ 
truder from jamming a signal sent to control torpedoes 
remotely, since using a single frequency might be eas¬ 
ily detected and blocked. Frequency hopping is used 
presently in Bluetooth and other types of wireless com¬ 
munication and is called FHS^ (Frequency Hopping 
Spread Spectrum). 

Given a set of frequency values [/i, / 2 , /a---], one selects 
a well-defined sequence of frequencies following an ap¬ 
parently random pattern (picked from PN values) shared 
solely between transmit and receive ends. For an eaves¬ 
dropper unaware of the sequence used, the signal appears 
as white noise containing no valuable information and 
that is the reason why it is termed spread-spectrum com¬ 
munication given that noise has broader bandwidth than 
the signal. 

FHSS needs another important ingredient to be com¬ 
pletely operational: sender-receiver perfect synchroniza¬ 
tion in order to be able to modulate-demodulate with 
the right frequency. It is Antheil, exploiting his musi¬ 
cian skills, who developed the synchronizatiorP method 
between sender and receiver enabling them to encrypt- 
decrypt ongoing transmitted information. 

The analog to digital conversion of frequency hopping 
gave birth to DSSS (Direct Sequence Spread Spectrum) 
methods based on Galois polynomials, the generators of 
PN sequences that we describe below and that are used 
presently in Wi-Fi and other types of digital communi¬ 
cations (Smartphones...). 

Consequently, it is important to relate noise to com¬ 
munications, how it might be used to alter the nature 
of the signal and ultimately transmit hidden information 
in a way such that it is properly retrieved by the target 
receiver. 

An ordinary resistor has a fluctuating voltage across it 


whether standing free or belonging to an electronic cir¬ 
cuit. The resistor embodies free electrons that are ther¬ 
mally agitated, inducing random voltage fluctuations. 

Most physicists/engineers refer to this thermal voltage 
fluctuation as Johnson-Nyquist noise, after J.B. John- 
soiP, who was first to observe the effect at Bell labora¬ 
tories in 1928 and H. NyquisiP who first explained it. 

Circuit noise studies in Bell laboratories have a very 
peculiar history since in the 1950’s, H. E. D. Scovil and 
his associates built the world’s lowest-noise microwave 
amplifiers cooled by liquid helium to reduce noise and 
incorporated in extremely sensitive radiometers used in 
radio-astronomy. 

Radiometers usually contain calibration noise sources 
consisting of a resistor at a known temperature. During 
the 1960’s Penzias and WilsorP while improving these 
radiometers discovered serendipitously Big-Bang cosmic 
background radiation in 1965. 

B. Yurk^ and his collaborators embarked, in the 
1980’s, on a pioneering study of Quantum noise through 
the quantization of LC networks drawing from an anal¬ 
ogy between an LC circuit and the harmonic oscillator. 
Quantum effects in circuits occur when we deal with low 
temperature (as in superconductors) or at very high fre¬ 
quency. Usual telecommunication and signal processing 
frequencies are in the kHz-GHz range whereas Tera-Hz 
(10^^ Hz) devices encountered in medical imaging and 
optical devices operate at 10^'* Hz. Gonsequently, kHz- 
GHz frequencies are classical whereas Tera-Hz and op¬ 
tical devices should be considered as quantum. With 
the progress of integrated circuits toward the nanometer 
scale (presently the minimal feature used in the semicon¬ 
ductor industry is 14 nm) and single electron as well as 
quantum dot (akin to synthetic atom) devices, we expect 
large quantum effects implying quantum noise becoming 
more important than thermal. 

The equivalence between an impedance and an oscilla¬ 
tor is a very important idea that will trigger and sustain 
steady progress in several areas of Quantum information 
and communication. 

Nyquist derived an expression for White Noise based 
on the interaction between electrons and electromagnetic 
waves propagating along a transmission line using argu¬ 
ments based on black-body radiation. This means that 
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Nyquist is in fact a true pioneer in Quantum noise. 

He based his work on Johnson measurements who 
found that thermal agitation of electricity in conductors 
produces a random voltage variation between the ends of 
the conductor R of the form: 

{{V - {V)f) = (SV^) = ARkeTAf (1) 

(...) is the average value, voltage fluctuation is SV = 
V — {V) and V is the instantaneous voltage measured at 
the ends of the resistance R. is Boltzmann constant 
and T is absolute temperature. A/ is the bandwidth 
of voltage fluctuations (see Appendix A). This frequency 
interval spans the range of a few Hz to several tens of 
GHz. 

The voltage fluctuation developed across the ends of 
the conductor due to Thermal noise is unaffected by the 
presence or absence of direct current. This can be ex¬ 
plained by the fact that electron thermal velocities in a 
conductor are much greater (~ 10^ times) than electron 
drift velocities. 

Since electromagnetic waves are equivalent to photons 
through Quantum Mechanics Duality principle, Nyquist 
derivation is based on blackbody radiation that was ex¬ 
plained earlier by Planck. 

In Quantum Mechanics language, a (zero rest mass) 
photon is a special case of a harmonic oscillator since the 
energy levels are separated by the same energy huj i.e. the 
n-th level En = nhio (ignoring zero-point energy /ia;/2) 
corresponds to an integer number n of photons. More¬ 
over Lo = 27r/ is the electr omagnetic pulsation and not 
the mechanical one \fkjm where k, m are the respective 
spring constant and mass of the mechanical oscillator. 

While classical pseudo-noise used in spread-spectrum 
communications hides the signal from intrusion by an 
eavesdropper through a crypting operation (FHSS fre¬ 
quencies follow a PN sequence whereas in DSSS, the sig¬ 
nal is directly multiplied by the PN sequence) using a set 
of keys (corresponding to a given PN sequence) that are 
shared solely between the transmitter and the receiver. 
Quantum mechanics can be used to encrypt the signal in 
a completely different fashion. 

Quantum Mechanics can be used to generate nat¬ 
urally random instead of deterministic pseudo-random 
numbers. In the early days of computing cosmic rays 
or radioactive sourced were used for generating non- 
deterministic random numbers. Quantum phenomena 
being essentially non-deterministic, would be able to pro¬ 
duce truly random numbers and the corresponding de¬ 
vices are called Quantum Random Number Generator^ 
(QRNG). 

Obviously, this is not the only advantage of Quantum 
Mechanics since at the Garching Max Planck Institute 
for Quantum Optics (MPQ) in Germany and the Tech¬ 
nical University of Vienna, communication experiments 
showed that Quantum Mechanics provides entanglement 
as an alternative concept to secure information transfer 
between two remote sites. 


Entanglement, first introduced by Einstein (who called 
it ’’spooky action at a distance”), Podolsky, and RoserP, 
and SchrodingeP in 1935, can arise when two quantum 
systems are produced from a common source, e.g. when a 
spinless particle decays into two particles carryiM oppo¬ 
site spins. Such states violate a set of inequalities estab¬ 
lished by J.S. Bell in 1964, implying that quantum the¬ 
ory embodies non-locality (see section IV for the math¬ 
ematical implication). Bell inequalities are the statisti¬ 
cal measure of entanglement and their violation can be 
demonstrated by measuring correlations between quan¬ 
tum states. 

Entangled quantum systems behave as if they can af¬ 
fect each other instantaneously, even when they are ex¬ 
tremely far from each other, due to the essential non- 
locaP^ character of entanglement. 

The strongest advantage of noise-based communication 
is that by hiding a signal in noise, it is extremely difficult 
or even impossible to detect it if the eavesdropper does 
not know the keys or the algorithm used between the 
transmitter and the receiver. In Quantum communica¬ 
tion (QG), entanglement ties together in a very stringent 
fashion both parties and any intrusion attempted by an 
eavesdropper, when detected, triggers immediately dis¬ 
ruption of communication. 

This work can be taught as an application chapter in a 
general Statistical Physics course at the Graduate or in 
a specialized Graduate course related to applications of 
Quantum Mechanics and Statistical Physics since physi¬ 
cists generally interested in the applications of Quantum 
Mechanics and Statistical Physics are keen to expand 
their knowledge to areas of Quantum Information Pro¬ 
cessing and Communications (QIPC). 

This paper is organized as follows: after reviewing sev¬ 
eral derivations of White noise by Nyquist and others in 
section H, we discuss in section HI the Fluctuation Dissi¬ 
pation theorem and its quantum version in order to derive 
in a rigorous way, Nyquist result with modern quantum 
noise approach and lay the foundations of secure commu¬ 
nication from the classical and quantum points of view. 
In section IV we apply the analysis to secure commu¬ 
nications with classical noise (spread-spectrum) and en¬ 
tanglement based Quantum information processing and 
transfer. Discussions and Conclusions are in section V. 


II. DERIVATIONS OF THERMAL NOISE 

Nyquist work is based on phenomenological thermo¬ 
dynamic considerations and electric circuit theory, in¬ 
cluding the classical equipartition theorem. The latter is 
based on the physical system number of degrees of free¬ 
dom. This numbeilA^ is well defined when the different 
contributions to system energy (translational, rotational, 
vibrational, electromagnetic...) are quadratic and decou¬ 
pled with presence of weak interactions. In the general 
case (non-quadratic energy or strong interactions), one 
evaluates the partition function in order to derive ther- 
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modynamical properties. 


A. Nyquist derivation of Thermal Noise 

Nyquist based his derivation on Einstein remark that 
many physical systems would exhibit Brownian motion 
and that Thermal noise in circuits is nothing more than 
Brownian motion of electrons due to ambient temper¬ 
ature. Despite the fact one might find several strange 
assumptions and even flaws in Nyquist derivation, it re¬ 
mains a pioneering interesting approach since it paves 
the way to quantization of electrical circuits and noise in 
circuits. Nyquist considered thermal noise in a resistor R 
as stemming from electrons interacting with electromag¬ 
netic waves represented by a one-dimensional black-body 
thermal radiator. Electromagnetic waves travel through 
an ideal (lossless) one-dimensional transmission line of 
length i joining two resistances R. Hence the trans¬ 
mission line characteristic impedance being equal to R 
amounts to considering that its impedance is matched at 
both ends and that any voltage wave propagating along 
the line is completely absorbed by the end resistor R 
without any reflection, exactly like a black-body. 

Each resistor R has a thermally-fluctuating voltage at 
temperature T which will be transmitted down the wires 
with a current and voltage wave appearing across the 
other resistor. 


R 




R 


I 

FIG. 1. Transmission line of length I matched by two resistors 
i? at its ends. 

A voltage wave propagating along the transmission line 
is expressed at any point x and any time t as: V(x, t) = 
Vq exp[i{KX — wt)] where k is the wavenumber and uj the 
angular frequency of the wave. 

The velocity v = uj/k in the line is typically c/10 
where c is light velocity in vacuum. Considering the 
transmission line of length ^ as a domain between x = 
0 and X = £ and imposing the boundary condition 
V{£,t) = V{0,t), Vf, we infer that possible propagat¬ 
ing wavenumbers are given by k£ = 2n7r, where n is any 
integer, and there are An = {l/2Tr)dK = duj/{2'Kv) such 
modes per unit length of the line in the frequency range 
between u) and lo -\- dio. 

In the Canonical ensemble, the Bose-Einstein distribu¬ 
tion for photons gives the mean number of photons (n) 
per mode at energy hw and temperature T as: 

<"> = ( 2 ) 


(3 = is inverse temperatur^i^ coefficient. Thus the 

energy of the photon gas (ignoring zero-point energy) is 
{n)hw. 

Detailed balance allows to equate the power absorbed 
by a resistor (in any angular frequency range lo and 
w -I- dio) to the power emitted by it. The energy in the 
interval lo and to + dio is proportional (see Appendix C) 
to the number of propagating modes per unit length in 
this frequency range. The mean energy per unit time 
incident upon a resistor in this frequency range is: 

(^) ^ ^Eiu;)dLo (3) 

where E{lo) is the electromagnetic energy at to. 
Nyquist considers that the total resistance making the 
circulating current I is 2R and thus I = V/2R as if the 
line whose characteristic impedance R did not contribute 
at all to the total resistance. Perfect matching at both 
ends implies that no resistance is contributed by the line 
since current/voltage waves are not subjected to scatter¬ 
ing. The mean power emitted down the line and absorbed 
by the resistor at the other end is 

OO 

0 

where Sy is the voltage Power Spectral Density (PSD) 
(see Appendix A). 

Hence we have: 


— E{Lo)dLj = ——Sv{Lo)dw 
ZTT 4ri 


( 5 ) 


with: 


Sv{lo) = 


2R hio 


TT — 1 

Moving from angular to linear frequency, we get: 


( 6 ) 


5v(/)=4i?- 


hf 


edhf _ 1 

Voltage fluctuations are given by (see Appendix A): 


( 7 ) 




OO 


df 


( 8 ) 


Performing a change of variable x = /3hf, we get: 


2 iRikeTY f X . 

= -ir- j —1^ 

0 


( 9 ) 
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Using the integraP^^i^ 


/ 


^2n-l 
- 1 


dx 


(27r)^"U„ 

4n 


( 10 ) 


with Bn the Bernoulli polynomial coefficients, we select 
n = 1 and iJi = |. 

The value of the integral in eq. N is thus ^. 

The fluctuations are then given by: 


2 2R{'KkBTf 
3h 


( 11 ) 


To sum up, in order to recover the Johnson-Nyquist re¬ 
sult we have to respect two conditions: finite band A/ < 
oo and low frequencies (kHz-GHz range) A/ keT/h. 

Additionally, it is surprising to note that Nyquist con¬ 
sidered a ID photon gas with a single polarization despite 
the fact the photon had two polarizations (circular left 
and right) and in sharp contrast with the evaluation of 
the blackbody radiation by Planck who considered a 3D 
gas with two polarizations (see Appendix C). Moreover, 
Nyquist ignored zero-point energy in spite of its impor¬ 
tance in quantum circuits and the fact Planck introduced 
it in his second paper on black-body radiation (see fur¬ 
ther below). 


This surprising result implies that, in the classical case, 
{h —>■ 0), fluctuations become extremely large. In fact, 
ordinary frequencies / ~kHz-GHz are low with respect 
to 6.25 xlO^^ Hz frequencies that correspond to thermal 
room temperature energy ksT. Thus hf <C ksT and the 
number of photons per mode is large since (n) « kBT/hf. 
In the classical limit, the number of photons being very 
large, we get wave-like behaviour whereas in the quan¬ 
tum limit a small (n) produces particle-like (photon) be¬ 
haviour. 

Expanding the PSD eq[^at low frequency hf ^ kBT: 


Svif)^^RkBT{l-^) ( 12 ) 


B. RC circuit classical derivation of Thermal Noise 

Nyquist’s theorem can be proven with the help of a par¬ 
allel RC circuit containing a random source representing 
interactions with a thermal reservoir. The resistor R is 
parallel to the capacitor C and the result of random ther¬ 
mal agitation of the electrons in the resistor will charge 
and discharge the capacitor in a random fashion. 

Starting from the time dependent equation of motion 
of the RC circuit, we have: 


R 


dqjt) 

dt 


-f+ f«) 


(16) 


Thus quantum effects no longer intervene in the low 
frequency limit / —>■ 0, yielding Nyquist result: 

S'v(O) = ARkBT (13) 

Another divergence is encountered when we ignore the 
frequency dependence of Sv{f) in eq. and consider 
5'v(0) to be valid for all frequencies as usually considered 
for ’’White Noise” (flat spectrum for all frequencies): 

OO OO 

alr= [ ARkBTdf = ARkBT [ df = oo (14) 



FIG. 2. RC circuit with the noise source ^(t) originating from 
thermal contact with a reservoir. 

q{t) is the capacitor charge and f{t) is a stochastic volt¬ 
age (see Appendix A) stemming from interactions with a 
reservoir at temperature T with the following statistical 
properties: 


0 


0 


This divergence is similar to the Ultra-Violet catastro¬ 
phe encountered in black-body radiation since hf 
corresponds to Rayleigh-Jeans regime and its solution is 
that voltages are filtered and we never encounter in prac¬ 
tice an infinite frequency domain. 

Therefore let us assume we have a finite bandwidth A/ 
for voltage fluctuations, then: 


($(t)) = 0 and = XS{t - t') (17) 

A is a constant that will be determined later and eq. 
is called a Langevin equatioiP^ (see Appendix B) due to 
the presence of the time-dependent random term f{t). 

Assuming the capacitor is uncharged at time t = —oo, 
direct integration of the first-order differential equation 
yields: 


A/ t 

<jI = j 4RkBTdf = ARkBTAf (15) g(t) = ^ exp(-t/AC') J exp{t'/RC)£,{t')dt' (18) 


0 


— oo 
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The voltage V{t) across the capacitor is related to 
charge through: q{t) = CV{t), therefore evaluating the 
charge PSD (see Appendix A) is equivalent to voltage 
PSD. 


Using properties of ^{t) given in eq. 17 we obtain: 


= = ^exp 

(19) 

This result is expected as discussed in Appendix A 
since the auto-correlation {q[t)q{t')) must be a decreas¬ 
ing function of the argument \t — t'\ controlled by the 
relaxation time RC. 

Setting t = t' we have the equality: C'^{V‘^{t)) = 
hence A is determined as: A = RC{V‘^{t)). 

The average {V‘^{t)) can be determined from the en¬ 
ergy iC'(U^) stored in the capacitor through the classical 
equipartition theorem: \C{V‘^) = as if a capaci¬ 

tor is equivalent to a single degree of freedom (see next 
section). 

The equipartition theorem can be proven as follows. If 
a system is at temperature T, the probability that it is 
in a state of energy E is proportional to the Boltzmann 
factor exp^—E/ksT). 

In the RC circuit the probability element dp of 
finding a voltage between V and (V + dV) is dp = 
Aexp{—E/kBT)dV corresponding to an energy E = 
\CV'^ stored in the capacitor C. 

The prefactor A normalizes the probability density: 


I = \ 


— OO 


( 20 ) 


C. Derivation of Thermal noise from Einstein 
thermodynamic fluctuation theory 


A macroscopic system at thermodynamic equilibrium 
is an ensemble of subsystems which are in thermody¬ 
namic equilibrium with each other. The actual values 
of the variables, however, may differ from mean equilib¬ 
rium values. 

The departure from equilibrium is due to fluctuations 
in the subsystems. 

The probability, p, for entropy fluctuation SS is ob¬ 
tained by reverting Boltzmann principle S = fc^lnlU 
as p{SS) = p{S — (S)) oc The probability p is 

proportional to W the number of microscopic available 
states and we assume the validity of applying Boltzmann 
principle to the entropy fluctuation 5S. 

Generally, entropy is a function of state variables 
i.e. S = S{Xi,X 2 , .■.,Xi,...). It can be expanded as dS 
around equilibrium since it is an analytical function for 
most thermodynamic systems when small fluctuations of 
the Xi are considered. 

At equilibrium S is maximum and all the first or¬ 
der derivatives = 0 ,Vj implying that the first non¬ 
vanishing terms are quadratic. 

Thus one has around equilibrium: 


5S 



d^S 

dXidXj 


SX,6Xj 


(23) 


The series expansion is performed at the equilibrium 
value of Xi, hence dXi = Xi — (Xi). 

The combination of Boltzmann principle and second- 
order expansion of entropy about equilibrium results in a 
Gaussian probability density function (PDF) for finding 
subsystems with the non-equilibrium value of the variable 
Xi (akin to the central limit-theorem). 


OO ^ , - 

Using the result / dx = we get A = J . 


— OO 

The mean square value of the voltage is obtained from 
the probability density as: 


OO 


(U^) = A 


y2^(-CVC2kgT)^y 


— OO 


( 21 ) 


Thus (V^j = 

The voltage fluctuation PSD may be evaluated with 
the equipartition theorem as: 


Sv(uj) 


(y^) 


2RC 

1 + (RCuj)^ 


2RkBT 
1 -f (RCuj)^ 


( 22 ) 


p(SXi) = 




(24) 


meaning that the average value (or macroscopic equi¬ 
librium) of Xi is (Xi) and that the standard deviation 
away from equilibrium is af = {SXf) = —/cb/(^^). 

The entropy of a single phase, one component system 
is given in terms of the energy U, volume $ and pressure 
PasdS=^ + f 

In the presence of a voltage V, the entropy expression 
becomes dS = ^ + ^d^— ^dV since charge q couples to 
voltage V. This yields the value of the entropy derivative 
The second derivative is thus obtained 

f 9bs' 


as: 


1 


T.$ 


(») 




The voltage fluctuation is expressed as: 


At frequencies such that oj l/RC we get Sv{oj) = 
2RkBT recovering the Johnson-Nyquist result (see 
not^i^. 


4 = i^y^) 



= kBT 


fdy\ 


dq 


( 25 ) 













6 


Assuming the validity of Ohm’s law: I = ^ = 
where Vb is some reference voltage (e.g. Vq = (V)), we 
infer that voltage fluctuations are given by: 


CTy = 


ksTR 


[d{V - Vo)/dt] 
(V-Vo) 


(26) 


Estimating the time derivative: ^ (V"-Vo) 

with r as a typical time variation of the voltage and 
given that for a band-limited signal of bandwidtfP A/ 
with A/ ~ we finally obtain for the voltage fluctua¬ 
tion expression : 


4 = 2RkBTAf (27) 

that agrees with Johnson-Nyquist result (see not^i^. 


III. THE QUANTUM 
FLUCTUATION-DISSIPATION THEOREM 
(QFDT) 

The classical fluctuation-dissipation theorem derived 
in Appendix B provides a relation between equilibrium 
fluctuations and dissipative transport coefficients. Be¬ 
sides, it is an interesting route to quantize classical noise. 

Callen and WeltoiP^ proved the QFDT with the corre¬ 
spondence theorem allowing to transpose classical results 
to quantum ones such that a classical physical quantity 
is transformed into its quantum counterpart with an ob¬ 
servable operator. 

For a single degree of freedom, linear response the- 
orjUH yields for the change of the expectation value of an 
operator-valued observable B due to the action of a (clas¬ 
sical) force F{t) that couples to the conjugate dynamical 
operator A: 


t 

{SB{t)) = J dsxBAit - s)F{s). (28) 

— OO 

6B{t) = B{t) — {B)o denotes the difference with respect 
to the thermal equilibrium average {B)q in force absence. 
The dissipative part of the response function XBA{t) is 
given by: 


XBA{t) = ^■{XBA{t)-XAB{-t)]. (29) 

The fluctuations are described by the equilibrium cor¬ 
relation function 

CBA{t) = {6B{t)6A{0))is (30) 

The thermal average is taken at an inverse temperature 
(3 (see Appendix A). 


The correlation function is complex-valued because the 
operators B{t) and A(0) in general do not commute. 
While the antisymmetric part of CsAit) is directly re¬ 
lated to the response function by linear response theory, 
the symmetrized correlation function PSD: 

SBA{t) = i {dBit)SA{0) + SA{0)dBit)) (31) 

depends on the Fourier transform of the dissipative 
part of the response function: 


S'ba(w) = Scoth Xba{^) ■ (32) 

where is the Fourier transform of XsAi^)- 

This is the quantum version of the fluctuation-dissipation 
theorem as it links the fluctuations S'ba(w) to dissipation 
as in the classical case (Appendix B). 

Note that Sba is a two variable extension of the PSD 
previously used and defined in Appendix A with a single 
variable. Consequently Sy should be written in fact as 
Svv- 

Analyzing the response of a current SI through an elec¬ 
tric circuit subject to a voltage change SV, implies B = I 
and A = Q, since voltage couples to charge Q. 

A circuit response is determined by SI{uj) = 
Y{uj)SV(uj) where Y{uj) is the admittance. Given I = Q, 
the symmetrized current PSD is Sii{uj) = iwSiQioj) 
yielding: 

Sii{u}) = feucoth (4^) 3?y(a;) 

= 2((n) -t . (33) 

where (n) is the Bose-Einstein factor (given by eq. 
and 3? is real part symbol. In the high temperature 
limit ksT ^ hw, we recover the Johnson-Nyquist result 
S'//(w) = 2^Y(uj)kBT (see not^^^. 

Nyquist, in the last paragraph of his 1928 papei^^, had 
already anticipated the quantum case. However, he made 
use of Planck first paper on black-body radiation which 
does not contain zero-point energy term ^hio. By miss¬ 
ing this term, Nyquist ignored the 1912 seconcP^ paper 
on black-body radiation by Planck who aimed at correct¬ 
ing his previous work by introducing zero-point energy in 
order to recover the right classicaP^ limit of an oscilla¬ 
tor mean energy per mode. Let us add that zero-point 
energy can also be shown to originate from Heisenberg 
uncertainty as in the ID harmonic oscillator cas^^. 

If the oscillator mean energy per mode is taken as 
{n)fujj, we obtain to order 0(4f) the classical (high 
temperature) limit ^bT ^ ku: 


{n)huj 


fUjJ 


1 4 - 4 

^ ^ kgT ^ 

kBT 


1 

^ ^ 2ykBT>--- 


i ) _ 1 

2 ^kBT' ^ 


IbT - huj. 

2 


( 34 ) 
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Thus one should rather write the mean energy per 
mode as ((n) + ^)Itw in order to retrieve the right clas¬ 
sical limit kgT originating from the comparison between 


Planck photon spectral density expression 


2ui^ 


hoj 

Ql3huj_l 


and Rayleigh-Jean^ expression (c is the ve¬ 

locity of light). 


A. LC circuit quantum derivation of Thermal Noise 


We define a new variable 


9{x, t) 


X 

J dx' q{x',t) 
0 


( 38 ) 


to express current density j(a;, t) = — and charge 

density q{x,t) = such that charge conservation 

rule: 


We start with an analogjESl between the harmonic os¬ 
cillator and the LC resonator. Moving from an RC to 
an LC circuit stems from the fact a resistance may be 

defined from R = and that an oscillator underlying 
a resistor allows a ready route to quantization. 

Later on when we consider a semi-infinite transmis¬ 
sion line with L inductance and C capacitance per unit 

length, the line resistance R = is same as the sin¬ 
gle LC resonator. Thus the transmission line might be 
viewed simply as a large collection of harmonic oscilla¬ 
tors (normal modes) and hence can be readily quantized. 
The resistance picture that links the resonator to the 
transmission line is very appealing and has has been in¬ 
troduced for the first time by Caldeira and LeggetfP^ to 
describe a continuum as sets of harmonic oscillators as 
described below. 

Let us write the Hamiltonian of a single LC resonator 
circuit in the form: 


+ ^9(a;,0 = 0- (39) 

is obeyed. 

The Hamiltonian is written as: 



From Hamilton equations of motion, we get the wave 
equation ^ ^ = 0 with velocity v = 1/\/LC. 

The normal mode expansion when the transmission 
line is considered with stationary boundary conditions 
at both ends 0 ( 0 , t) = 0 (£, t) = 0 is given by: 

0(x,t) = W - ^ 6 „(t)sinfc„x, (41) 

n—1 


26*0 ^ 2Lo 


(35) 


where variables q and (j) are capacitor charge and flux 
in the inductor. Drawing from complete analogy with 
the harmonic oscillator, we quantize variables with: 


q= + = (36) 

where R = and a), a are ladder operators char¬ 

acterized by commutation property: [a, a^] = 1 . 

The Hamiltonian is transformed into standard har¬ 
monic oscillator form = HuJo{a^o, + 5 ) with ujq = 
l/VLoCo, the classical resonance frequency. 

Moving from a single oscillator to a continuum, we fol¬ 
low GoldsteirP^ treatment by considering a transmission 
line of length i characterized by an inductance L and 
capacitance C per unit length. 

The Hamiltonian of the system is 


^(t) 



g^(a:,t) 

2C 


2L 


(37) 


where (j){x, t) is the local flux density and q{x, t) is the 
local charge density. 


where bn{t) is the time-dependent mode amplitude 
and quantized wavevectors kn = ^- After substitu¬ 
tion of this form into the Hamiltonian and integrating 
over X exploiting orthogonality of the basis functions 
[cos knX, sin knx] over the interval £ gives: 


n—1 


L ' dbnjt) 
2 dt 


(42) 


Quantizing the system in terms of harmonic oscillator 
ladder operator sets using the correspondence: 


bn(t) [4 W + (^)] ( 43 ) 

where w„ = controls Heisenberg time dependence 
of ladder operators through a)j(t) = exp(ja;„<)aJj( 0 ) and 
a„(t) = exp(—fa;„t) a„( 0 ), yields, from charge density 
q{x, t) = ^ voltage at a; = 0 : 


V{t) 


1 

c 


d6{x,t) 


dx 





5]V^[e“"‘at(0) + e- 

n—1 


an( 0 )] 


( 44 ) 






















The voltage PSD is obtained after quantum averaging 
the voltage time correlation (see Appendix A): 

27r “ 

Sviuj) = — hWn[n{uJn)S{uj+UJn) + [n{uJn) + l]6{uj-UJri)], 

n—1 

(45) 

where n(a;) = (a|j(0)a„(0)) is the photon Bose-Einstein 
distribution with energy hw defined previously as (n) in 
eq[2] 

Taking the limit t' —> oo and converting summation to 
integration through the replacement 


n—1 


— / /(w)da 

Jo 


(46) 


yields 


Sv{uj) = n(—tLi)T(—a;)-t-[n(w)-|-l]T(w)}, (47) 

where T(w) = S{u} — x)dx is the Heaviside step 
function. Physically the negative uj term corresponds to 
energy absorption whereas in the positive uj case, n{uj) 
represents stimulated emission and 4-1 represents sponta¬ 
neous emission leading to S'y(w) being asymmetric with 
respect to oj in contrast to the classical oscillator case 
(see Appendix A). 

In the OJ > 0 case (T(w) term retained), the spectral 
density: 


Sv{oj) 


2Rhw 

^ _ ^—hu)jkBT ’ 


(48) 


reduces, in the classical limifPSlfcBr ^ Hou, to Johnson- 
Nyquist noise result Svioj) = 2RkBT (see not^i^. 

In order to retrieve the quantum fluctuation- 
dissipation theorenP^^ take the symmetric part of 
Svioj) by adding positive and negative spectral contri¬ 
butions: 


Sv{oj) + Sv{—oj) = 2Rhuj coth 


/ fea \ 
\2kBT) 


(49) 


IV. APPLICATION TO SECURE 
COMMUNICATIONS 


The main question in this section deals with the pos¬ 
sible way to communicate securely with a classical ap¬ 
proach based upon acting on communication bits with 
controlled noise (shift-register generated pseudo-random 
bits) or through Quantum Communications based on en¬ 
tanglement. 


A. Spread spectrum communications 

The principle of spread-spectrum communications such 
as DSSS used in Wi-Fi and cordless telephony is based 
on multiplying the message (made of O’s and I’s) by a se¬ 
quence of pseudo-random bits. Pseudo-Random Binary 
Sequences (PRBS), the digital version of PN sequences 
are produced in a controlled fashion with a determin¬ 
istic algorithm akin to pseudo-random numbers used in 
a Monte-Carlo algorithm or some other type of simula- 
tiorP^. 

The main goal of PRBS generation, is to draw 0 or 
1 in an equally probable fashion in order to have highly 
efficient crypting of the message (largest bandwidth or 
spreading). A particularly efficient method for produc¬ 
ing PRBS is based on primitive polynomials modulo 2 or 
Galois polynomials^ with the following arithmetic: 

000 = 0,001 = 1,100 = 1,101 = 0 . 

0 is the usual symbol for modulo 2 arithmetic corre¬ 
sponding to the logical XOR operation. 


987654321 0 



FIG. 3. Shift register connections with feedback set up for 
PRBS^ generation on the basis of a (modulo 2) primitive 
polynomial given by 1 0 0 i®. It is of order 9 and tap 

connections (9,4,0) are shown. 

The coefficients of primitive polynomials modulo 2 are 
zero or one e.g. 0 0 1, moreover they cannot be 

decomposed into a product of simpler modulo 2 polyno¬ 
mials. An illustrative example is x^0l that cannot be de¬ 
composed into simpler polynomials with real coefficients 
but can be decomposed into polynomials with complex 
coefficients 0 1 = {x + i){x — i) with i = When 

this polynomial is viewed as a Galois polynomial, it is not 
primitive since it can be decomposed into a product of 
simpler polynomials x^0l = x^ 02x01 = (x0l)(x0l) 
since in modulo 2 arithmetic the term 2x is equivalent to 
0 according to the above arithmetic rule (1 0 1 = 0). 

The method for producing PRBS illustrated in fig. 
requires only a single shift register n bits long and a few 
XOR or mod 2 bit addition operations (0 gates). 

The terms that are allowed to be XOR summed to¬ 
gether are indicated by shift register taps. There is pre¬ 
cisely one term for each nonzero coefficient in the primi¬ 
tive polynomial except the constant (zero bit) term. Ta¬ 
ble |I] contains a list of polynomials for n < 15, showing 
that for a primitive polynomial of degree n, the first and 
last term are 1. 

A Maximum-Length Sequence (MLS) x[n] is a bal¬ 
anced sequence made from equally probable symbols with 
values 0l and -1 such that the MLS averages to zero. 
Choosing x[n] = (—1)“[”1 with a[n] =0 or 1 originating 
from PRBS yields the desired values x[n]=0l or -1 with 
01/-1 equally probable. The PRBS sequence a[n] is pro- 
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Connection Nodes 

Equivalent Polynomial 

(1, 

0) 




1 -1- a: 

(2, 

1, 

0) 



1 -|- a: -1- 

(3. 

1, 

0) 



1 -b a: -1- a;^ 

(4, 

1, 

0) 



1 X + x'^ 

(5, 

2, 

0) 



l + x^ + x^ 

(6, 

1, 

0) 



1 + X + x^ 

(7, 

1, 

0) 



1 + X + x'^ 

(8, 

4, 

3, 

2, 

0) 

l + x^ + x^ + x‘^ + x^ 

(9, 

4, 

0) 



1 + x'^ + x^ 

(10, 

3, 

0) 



l + x'^ + a;^° 

(11, 

2, 

0) 



1 + 

(12, 

6, 

4, 

1, 

0) 

1 + X + x‘^ + x^ + x^^ 

(13, 

4, 

3, 

1, 

0) 

1 X + x^ + x'^ + x^^ 

(14, 

5, 

3, 

1, 

0) 

1 + X + x^ + x^ + x^‘'‘ 

(15, 

1, 

0) 



1 + X + x^^ 


TABLE I. List of the first 15 Galois polynomials. 


with N = 2"= — 1 where Uc is the number of coding 
bits or MLS order. N is the period or the length of the 
MLS. 

As an example, the auto-correlation Rxx[n\ of order 
Tic = 9 shown in fig. 0d isplays a S function-like behaviour 
required for message decoding or synchronization (shown 
in fig.[|). 

600 I-^^^^^ 

500 - 
400 - 
300 - 
200 - 
100 - 

0 - 1 - 

-100 I-^^^^^ 

0 wo 200 300 400 500 

n 

FIG. 5. Auto-correlation of order 9 MLS displaying 

the peak value of 2®-l=511 over the period interval [0-511]. 


duced with a shift register XOR operation as discussed 
previously and illustrated in fig. The MLS has many 
attractive features in addition to the balanced character: 
its standard deviation and peak values are both equal to 1 
making its crest factor (peak/standard deviation) equal 
to 1, the lowest value it can gelP^. That is why MLS 
has noise-immune propertj^^ required in communication 
electronics. MLS are used not only in secure communi¬ 
cations but also in synchronization of digital sequences. 


N N 



N 

FIG. 4. Property of MLS auto-correlation Rxx[n\ showing 
peaks that enables decoding the message and displaying max¬ 
imum length N = 2"“= — 1 with ric the number of coding bits. 

A message x{t) transmitted through a linear time- 
invariant medium is convoluted with the channel impulse 
response h(t) resulting in an output message: 

/ OO 

h{t — t')x{t')dt' (50) 

-OO 

The decoding process of the message is based on a 
correlation operation based on the x[n] auto-correlation 
given by: 


Rxx 


1 

IV- 1 


N-2 

a;[i]a;[n -|- i] 

i=0 


N-2 


IV- 1 


i=0 


(51) 


Another application of the MLS is the determination of 
the impulse response h(t) of any communication channel 
by sending through the channel a PRBS signal x{t) whose 
auto-correlation is a delta function that will be used to 
identify h{t) at the receiver (see eq. 50) since: 


h{t) = / h{t — t')S(t')dt' (52) 

J —OO 

The impulse response determined with MLS is known 
to be immune to distortion. This is why despite the fact, 
many other method^^ exist to measure it with various 
success, MLS is still preferred when distortion is an issue. 


B. Quantum communication (QC) 

Quantum Mechanics provides several important ingre¬ 
dients to information communication not present in its 
classical counterpart!^. Firstly the information itself sent 
across a communication channel can be either classical or 
quantum. The same applies to the channel that might be 
classical or quantum. Information transmission is mea¬ 
sured with input-output correlations performed across 
the channel that can also be classical or quantum, the 
signature of entangled states. Copying a bit in classical 
communication is a trivial voltage replication operation 
whereas in QC the no-cloning theorenP^ forbids copying 
quantum information without leaving a trace. Crypting 
information can be made with classical keys (as in PRBS) 
or quantum keys. The generation of random numbers 
through quantum means (QRNG) are superior to PRBS 
despite their many interesting properties. 

Quantum networks across which quantum information 
is carried is also different from its classical counterpart 
and finally classical noise as well as quantum noise should 
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be properly described in order to evaluate information 
error rates. 

We describe every element of quantum communication 
below. 


1. Quantum unit of information: the qubit 

The discret^^ unit quantum information in 2D Hilbert 
space is the qubit, the two-state quantum counterpart of 
the classical bit (see fig. [^. 

It is represented by a two-component wavefunction (or 
spinoi^^ 

Computationally, a qubit is representable with 128 
classical bits considering that it is made of two complex 
numbers that are equivalent themselves to four 32 bit 
(single precision) float numbers. 

In the case of photons, quantum states |0) and |1) are 
equivalent to orthogonal polarization states (see fig. . 

The photon is the logical choice as the basic informa¬ 
tion carrier in quantum communications proceeding be¬ 
tween nodes that make quantum networks. Information 
can be encoded in photon polarization, orbital momen¬ 
tum, spatial mode or time and any manipulation target¬ 
ing processing or information transfer can be made with 
optical operations, such as using birefringent waveplates 
to encode polarization... 

On the other hand, atoms are the natural choice to 
make quantum memories since some of their electronic 
states can retain quantum information for a very long 
time. 

Quantum networks convey quantum information with 
nodes that allow for its reversible exchange. The latter 
may be done with two coupled single-atom nodes that 
communicate via coherent exchange of single photons. 
In comparison, classical fiber-optic networks use pulses 
containing typically 10^ photons each. 

In order to prevent change in information or even its 
loss, it is necessary to have tight control over all quantum 
network components. Considering the smallest memory 
for quantum information as a single atom with single 
photons as message carriers, efficient information trans¬ 
fer between an atom and a photon requires strong inter¬ 
action between the two components not achievable with 
atoms in free space but in special optical cavities. 

A low-loss cavity made with a set of strongly reflective 
mirrors alters the distribution of modes with which the 
atom interacts modifying the density of vacuum fluctu¬ 
ations that it experiences at a given frequency enhanc¬ 
ing or reducing atomic radiative properties. As a con¬ 
sequence, spontaneous emission from the atom excited 
state being a major source of decoherence can be inhib¬ 
ited in a cavity. 

A low-loss optical cavity possesses a high quality fac¬ 
tor (Q > 10^) allowing a photon entering the cavity to 
be reflected between mirrors making the cavity several 
thousand times per second strongly enhancing its cou¬ 
pling with the atom leading to its absorption by the atom 



FIG. 6. Bloch sphere (Poincare sphere for photons) repre¬ 
senting the possible values of a quantum information unit in 
2D Hilbert space or qubit shown as the quantum wavefunc¬ 
tion |'i/)(0, (/>)). The classical bits (0,1) are the poles of the 
sphere. A qubit is any two-component wavefunction given by 
(a|0) -I- /3|1)) with complex coefficients a,/3. A pure state 
exists over the Bloch sphere with lop -I- |/?|^ = 1 whereas a 
mixed state lies inside the sphere with |q|^ + |/Ip < 1- A clas¬ 
sical analoj^ state lies anywhere on the vertical axis linking 
the poles. 


in a highly efficient coherent fashion. 

On the other hand, photon emission by an atom inside 
a cavity is highly directional and can be sent to other 
network nodes in a precisely controlled fashion. 

Controlling qubit states means that an operator is re¬ 
quired to allow switching from one qubit state to another. 
A rotation matrix Rz{9,(j)) represents such an operator 
in the |0), |1) basis: 


4(0,<(>) 


cos I 
sin | 


—sin I 
cos I 


(53) 


Applying Rz{0, (jf) on the state |0) allows us to produce 
an arbitrary state (0 0, ^ ^ 0) on the Bloch sphere: 

\ip{0,4i)) = Rz{9,(j))\Q) = cos I |0) — sin I |1 ) = 
(q:| 0) -I- /?|1)). This applies only for pure states that 
lie on the Bloch sphere surface (lap + |/?P = 1). In the 
case of mixed states (|ap-|-|/3p < I) we need additional 
operators that alter also the wavefunction modulus. Ex¬ 
perimentally, photon polarization can be rotated with 
a half-wavelength plate (called also a Hadamard gate), 
moreover it can be separated into individual components 
with a polarizing beam-splitter (see ref.^^. 


2. Entanglement 

Quantum networks possess special features that are 
not found in their classical counterparts. This is due to 
the intrinsic nature of the information processed: while 
a classical bit is either 0 or 1 (see fig. , a qubit (quan¬ 
tum bit wavefunction) can take both values at the same 
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time due to coherent superposition inherent to Quantum 
Mechanics linearity. 

Quantum Mechanics embodies the notion of entangle¬ 
ment detected with violation of Bell inequalities and 
that brings a paradigm shift into information processing. 

Given two qubits IQi) = ^(co|0) -I- ci |1)) and 

IQ 2 ) = ^(*^0 |0) -I- di |1)), it is possible to build a 

state \Qi,Q 2 ) = \Qi) ® IQ 2 ) such that: 

|Qi,Q 2) = ^(co|0)-f Ci|l))(g)(do|0)-hdi|l)) 

= ^(codo |0,0) -I- codi |0,1) -I- Cl do |1,0) -I- cidi |1,1)) 
V4 

(54) 

Quantum Mechanics, however, allows for building 
other states such as: \Q) = ^(codi |0,1) -I- cido |1, 0)) 
which are not decomposable into products of constituent 
states. 

These states are called entangled and can be mapped 
onto the polarization of single photons which can be 
transferred through an optical fiber between two nodes 
consisting respectively of atoms in state |A) and state 
\B). 

Quantum mechanical entanglement ought to be 
achieved between the two nodes in order to have success¬ 
ful QC maintained over the coherence time preserving 
integrity of quantum information transfer. 

In order to achieve entanglement between two remote 
network nodes, polarization of the single photon emit¬ 
ted by atom in state |kl) is entangled with the atomic 
quantum state. 

Once the photon gets absorbed, the entanglement is 
transferred onto atom in state \B) and reversible ex¬ 
change of quantum information is performed between the 
two nodes. 

Experimental production of entanglement can be made 
between two particles (bipartite) or between several par¬ 
ticles (multipartite) and for each number of particle (two, 
three, four ...) case or particle type (atoms, electrons, 
photons...) several experimental procedures readily ex¬ 
ist. It is not limited to microscopic particles since it 
can be induced by a light pulse between two macroscopic 
object^^ consisting each of a gas containing about 10^^ 
Cesium atoms. 

Entanglement can occur when particles interact and 
kept in contact or when they emerge from a common an¬ 
cestor as in the EPiP case where a spinless particle de¬ 
cays into two particles carrying opposite spins... Another 
example is the case of a photon interacting with a non¬ 
linear crystal. It can be destroyed and replaced with a 
lower energy entangled photon pair (the process is called 
SPDCP^or Spontaneous Parametric Down-Conversion). 

Heralded^ entanglement may occur between non¬ 
interacting remote particles (Yb ions held in two ion 
traps, I meter apart) not possessing a common ances¬ 
tor, however the entanglement probability ps is very low 


(pe ^ 10“®) since entanglement results from the inter¬ 
action of decay photons emitted by each ion after their 
excitation by picosecond laser pulses. Thus pe needs to 
be increased substantially in order to make it applicable 
to mass QC. 

3. Quantum Random Number Generation 

Classical Random Number Generators (RNG) are 
based on Uniform RNG and the standard statistical qual¬ 
ity tests target the uniformitjBSl of the numbers gener¬ 
ated. Quantum Mechanics introduce a predictability test 
to further improve quality of RNG. 

This means that even if the RN is perfectly uniformly 
distributed, it may contain hidden deterministic infor¬ 
mation and is therefore prone to be predictable. For 
instance, PN and PRBS generate uniformly distributed 
numbers but since they are produced with a determinis¬ 
tic algorithm, an eavesdropper might, by drawing values 
and performing statistical analysis^S, be able to make an 
educated guess and access the cipher password, key... 

Thus, statistical uniformity tests are necessary but not 
sufficient to guarantee that any given RNG is not prone 
to attack and guess by an intruder. Quantum RNG 
(QRNG) offers ’’true RN” generation that is very dif¬ 
ficult to predict. Using a special program called ’’ran¬ 
domness extractor”!^ one might eliminate all bit strings 
originating from an implicit deterministic algorithm and 
keep only truly random bit strings. For this reason, 
the method is also called, amplification of weak random- 
nes^. 

Randomness extraction procedure exploits entropy hi¬ 
erarchy (see Appendix D) that attributes a number of 
bits depending on the entropy estimation used. Renyi 
min-entropy is very efficient computationally wise and a 
string of perfectly random bits has unit min-entropy per 
bit as derived in Appendix D. 

Starting from I input bits X^ of low-entropy per bit 
(s < 1), the extractor computes a number k < I of higher- 
entropy (s' « 1) output bits Yj with a linear transforma¬ 
tion via multiplication by a matrix m: 

i 

^0 = '^rrijiXi, j = l...k (55) 

i=l 

m is built from I x k random bits that can be generated 
with Galois polynomials and all arithmetic operations are 
done modulo 2 with AND and XOR logic. 

This ’’Whitening” procedure can be viewed as the 
quantum counterpart of the Maximum Entropy Method 
that is widely used in Image Processing for deblurring 
image^^. 

As a direct application of this concept, Sanguinetti 
et alW^ used Smartphone cameras to produce Quantum 
Random Numbers. After uniform illumination of the 
camera image sensor by a LED and estimation of the 
number of photons generated per pixel, a randomness 
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extractor algorithm such the above (eq. is used to 
compute truly random numbers. 

For Xi input bits with low entropy per bit (s < 1), the 
probability that the output Yj deviates from a perfectly 
random bit string (with high entropy per bit s' « 1) is 
boundecP^ by: 

e = 2-('"-'=®')/^ (56) 


Picking a CCD image sensor with 16 bits per pixel 
(detection capability) and a photon flux producing 2 x 10 "^ 
electrons per pixel gives = 8.469 bits/pixel (from 
eq. D7) yielding a min-entropy per bit s = 0.529 (in 


comparison, Shannon Entropy is 9.191 bits/pixel or 0.574 
per bit). Selecting input I = 2000, output k = 400 and 
s' = 1, we get e = 2.57 x 10“^®^. 

As a result, an eavesdropper would have to generate 
an extremely largd^ amount of random numbers (about 
1.97 X 10®®) before noticing any departure from a per¬ 
fectly random sequence, indicating the superior perfor¬ 
mance of QRNG with respect to any classical RNG. 


4- Quantum Keys 

Glassical cryptography is based on two types of keys 
that are used to encode and decode messages: secret or 
symmetric keys and public or asymmetric keys. Sym¬ 
metric keys are same for encoding and decoding mes¬ 
sages whereas in public cryptography systems, one needs 
a public key and a private key. In the PGP (Pretty 
Good Privacy) secure mailing system over the Internet, 
the sender encodes the message with receiver public key 
and the receiver decodes the message with his private key. 
In quantum cryptography, the simplest example of secret 
key sharing among sender and receiver (Alice and Bob) 
in QKD is the BB84^ protocol. Alice and Bob com¬ 
municate through two channels: one quantum to send 
polarized single photons and one classical to send ordi¬ 
nary messages. Alice selects two bases in 2D Hilbert 
space consisting each of two orthogonal states: 0 ba¬ 
sis with ( 0 , 7 r/ 2 ) linearly polarized photons, and 0 basis 
with ( 7 r/ 4 , — 7 r/ 4 ) linearly polarized photons. 

Four symbols: |—)■), |t) , \/') , |\) representing polar¬ 
ized single photons are used to transmit quantum data 
with 10) = ^(0) + It)) and |\) = ^(0) - It)). 

In the {basis, data) representation, the symbols are 
given by 0 ) = ( 0 , 0 ), It) = (0,1) in the 0 basis 
whereas |\) = (0, 0 ), | 0 ) = (0, 1 ) in the 0 basis. 

A message transmitted by Alice to Bob over the Quan¬ 
tum channel is a stream of symbols selected randomly 
among the four described above. 

Bob performs polarization measurements over the re¬ 
ceived symbols selecting randomly bases 0 or 0 . 

Afterwards Bob and Alice exchange via the classical 
channel their mutual choice of bases without revealing 
the measurement results. 

In the ideal case (no transmission errors, no eavesdrop¬ 
ping) Alice and Bob should discard results pertaining to 


measurements done in different bases (or when Bob failed 
to detect any photon). This process is called ’’key sifting” 
after which the raw key is determined. 

After key sifting, another process called key distilla- 
tioiP must be performed. This process entails three 
step^ error correction, privacy amplification and au¬ 
thentication in order to reveal classical or quantum er¬ 
rors of transmission, detect eavesdropping (with the no¬ 
cloning theorerrPH) and act against it. 

Ignoring, for simplicity, key distillation, the raw key 
size is typically about one quarter of the data sent since 
both Alice and Bob are selecting their bases at random 
(total probability is roughly 5 X 5 = 1 )- 

A random number generator (RNG) or rather a ran¬ 
dom bit generator can be used to select 0 or 0 bases. 
Using PRBS or, even better, QRNG to select measure¬ 
ment bases, we infer that by comparison with the classi¬ 
cal FHSS crypting method. Quantum Mechanics provides 
extra flexibility through basis selection. Such option is 
simply not available in classical communication. 

On the negative side, there are several problems that 
may come up with the BB84 scheme. One major obstacle 
is that presently, it is difficult, on a large scale level, to 
produce single photons. One approximate method for 
doing this, is to use attenuated laser pulses containing 
several photons that might be intercepted in the quantum 
channel by an eavesdropper with a PNS (Photon Number 
Splitting) attack. 

Quantum Gommunications can be made more secure 
when QKD is implemented with entanglemenlP^ provid¬ 
ing a secure way to distribute secret keys between remote 
users such that when some eavesdropper is detected, the 
transmission is halted and the data discarded. 

The BBM9d2^ scheme is an entanglement based ver¬ 
sion of the BB84 protocol. Polarization entangled pho¬ 
ton pairs (called EPR pairs or Bell states) are sequen¬ 
tially generated with one photon polarization measured 
by Alice and the other measured by Bob. EPR pairs are 
produced after emerging from SPDCP by using a bire- 
fringent phase shifter or slightly rotating the non-linear 
crystal itself since the state produced by SPDG is: 

|0 = ^(0t) + e*^|t^)) (57) 

Thus it suffices to modify to 0 or tt or place a quar¬ 
ter wave-plate giving a 90° shift in one photon path to 
generate all Bell state^^. These states are polarization 
entanglecP^ photons : 

= ^(0t) ± It^)), ± Itt)) 

(58) 

The set forms a complete orthonormal basis in 4D 
Hilbert space for all polarization states of a two-photon 
system. 

Alice and Bob choose randomly one of the two bases 
0 or 0 to perform photon polarization measurement. 
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Afterwards Alice and Bob communicate over the clas¬ 
sical channel which basis they used for each photon suc¬ 
cessfully received by Bob. 

The raw key is obtained by retaining the results ob¬ 
tained when the bases used are same. Neither RNG nor 
QRNG are used in this case since randomness is inherent 
to the EPR pair polarization measuremenlP^. Moreover, 
no Bell inequality tests are needed since all measurements 
must be perfectly correlated or anti-correlated. 

For instance in the state, if one photon is mea¬ 
sured to be in the |—>■) state, the other must be in 
the It) since the probabilities of measuring or 

tt are given by | |V^+) p = | (ffl |V’+) P = 0, 

whereas the probabilities of measuring —J-f and are 
I (—^-tl Itt'*') P = I (t—1| P = 5 - This is termed per¬ 

fect anti-correlation. 

When the polarization measurements are performed 
in the 0 basis, we get rather, perfect correlation. 
That means the probabilities of measuring 0\, or \,0 
are | (/'\| 1^/’“*') P = | (\0| IV'"'’) P = 0: whereas the 
probabilities of measuring 00 or W, are given by 

I (^^1IV'^) P = I (\\l l^+) P = i 

Note that if we rather consider the |'0 ) state, we get 
perfect anti-correlation in both bases 0 and 0. 


tive and solving, we get Lopt = 

This yields Lopt =21.7 kms for n = 1, Lopt =10.86 kms 
for n = 2 and Lopt =5.43 kms for n = 4. 

Errors produced by noise, interference and damping 
are represented by a BER (Bit Error Rate), the ratio of 
wrong bits over total number of transmitted bits. BER 
versus distance is an important indicator of communica¬ 
tion quality as much as communication speed is repre¬ 
sented by bit rate versus distance. 

In the quantum case, the QBER (Quantum BER) 
Qe{L) versus distance is the quantity of interest. Regard¬ 
ing the BB84 protocol case, a simple modeP^ delivers the 
expression: 


^ A{L)^riBob + ‘2‘Pe 


(59) 


where Pe is the probability of error per clock cycle 
(measured to be 8.5 xl0“^). — 0.1 is the average 

photon flux used by Alice to transmit symbols and rjBob = 
0.045 is Bob apparatus detection efficiency. The results 
are displayed versus distance L in figj^ 


5. Quantum Networks 

In classical communications, channel transfer function, 
the Fourier transform of its impulse response h(t) is a 
function of frequency and distance. Channel bandwidth 
and signal attenuation are functions of distance. When 
a pulse (representing a communication symbol made of 
several bits depending on the modulation method used) 
is sent through an optical fiber, it undergoes broadening 
leading to inter-symbol interference, attenuation leading 
to signal loss and alteration due to noise. Thus it is 
required to evaluate the largest distance that could be 
covered at the end of which a repeater is placed in order 
to filter out noise and restore pulse shape to its original 
form. 

In QKD, Alice and Bob should be able to determine 
efficiently their shared secret key as a function of distance 
L separating them. Since, the secure key is determined 
after sifting and distillation, secure key rate is expressed 
in bps (bits per symbol) given that Alice sends symbols 
to Bob to sift and distill with the remaining bits making 
the secret key. 

The simplest phenomenological way to estimate secure 
key rate versus distance K{L) is to consider a point- 
to-point scenario with K{L) cx [A(L)]” where A{L) = 
YQ-aoL/w jg 3igual attenuation versus distance. Oq is the 
attenuation coefficient per fiber length and n = I, 2.... ao 
depends strongly on the wavelength A used to transmit 
information through the fiber. For the standard Telecom 
wavelengtiP A = I.55/rm, Q!o=0.2 dB/km. 

The optimal distanc^^Lopt is determined by the maxi¬ 
mum of the objective function LK{L). Taking the deriva¬ 



L(kin) 

FIG. 7. (Color on-line) Classical BER and quantum QBER 
versus distance L along an optical fiber using the BB84 pro¬ 
tocol considering they start from the same value at L = 0. 

Fig.j^shows that the QBER increases faster and takes 
larger values than the optical fiber classical BER. For 
many digital lightwave systems using ON-OFF modu- 
latioiP (1 for light pulse, 0 for no pulse), the classical 
BER is typically about 10“® and may reach values in 
the [10-1® - 10-1®] range. 

Moving on to estimate the secure key generation rate 
in bits per symbol (bps) emitted by Alice, a simple model 
for the BB84 protocoP^ gives: 

KiL) = Gp{-h2{Qe{L)) + II[1 - /i2(ei)]} (60) 

where Gp is the gain for an average photon flux /r. LI is 
the fraction of events detected by Bob and produced by 
single-photon signals emitted by Alice. ei is the corre¬ 
sponding QBER and /12 is the binary Shannon entropjP^ 
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given by h 2 {x) = —a;log 2 (a:) — (1 — x)log 2 (l — x). Us¬ 
ing the same parameters as in RefP^ and bounds for 
and ei estimated in Ref.l^, we are able to plot the secure 
key rate versus distance for several values of the detector 
error rate e/j as displayed in fig. 


over which entanglement and coherence are maintained, 
paving the way to long-distance QC. 

6. Quantum noise 



FIG. 8 . (Color on-line) Key rate K{L) in bps versus distance 
L using the same parameters as in Ref.® for several detector 
error rates 60 = 0 . 01 , 0.1, 0.2 and 0.4. 

Fig.ll shows that the key rate is small and given that 
security increases with key length, a major improvement 
with respect to this simple approach should be under¬ 
taken in order to increase substantially the bps rate. 

Recently, a joint team from Cambridge Science Park 
and University of Cambridg^^ succeeded to increase sub¬ 
stantially the secure key rate using detectors operating at 
room temperature. The secure key rates obtained were 
between 1.79 Mbit/s and 1.2 kbit/s for fiber lengths be¬ 
tween 40 km and 100 km, respectively. 

Regarding network building developments, the first el¬ 
ementary quantum network based on interfaces between 
single atoms and photons located at two network nodes 
installed in two distant laboratories connected by an op- 
tical fiber link was made in 2012 by a team of scientistP^ 
at the Garching MPQ. 

Using the above procedures, Ritter et al^ were able 
to generate entanglement between two remote nodes in 
two different laboratories separated by a distance of 21 
meters and linked by an optical fiber. They were able to 
maintain entanglement for about 100 microseconds while 
entanglement generation itself took about a single mi¬ 
crosecond. 

Later, a team from Technical University of ViennaP^ 
succeeded in coupling Cesium atoms to an optical fiber 
and storing quantum information over a period of time 
that is long enough to sustain entanglement over dis¬ 
tances (hundreds of kilometers) that are large enough to 
achieve reliable long distance communication. 

The Vienna team extended coherence time to several 
milliseconds and given that speed of light in an optical 
fiber is about 200 kilometers per millisecond, a substan¬ 
tial separation increase is henceforth achievable poten¬ 
tially reaching several hundred kilometers between nodes 


At low temperature, very high frequency hf > ksT, 
mesoscopic scale or when considering single carrier, quan¬ 
tum dot devices... quantum noise becomes larger than 
thermal implying a full reconsideration of traditional 
electronics that has long been described by White (ther¬ 
mal noise with no relaxation time), Shot noise based on a 
single relaxation time (such as generation-recombination 
noise in semiconductors), Pink noise (1//) originating 
from a distribution of relaxation times... 

Recently, entanglement has been shown to appear 
spontaneously in photon-assisted electrical noise occur¬ 
ring in quantum conductors consisting of an ac-biased 
tunnel junction cooled at low temperatur^^. 

The experiments were performed in Sherbrook^^ at 18 
mKpSlon a AI/AI 2 O 3 /AI tunnel junction with resistance 
of 70 n, the signal being emitted by the junction analyzed 
at two frequencies /i=7 GHz and / 2 = 7.5 GHz. 

The total voltage applied on the junction is given by 
Vdc + Vac cos 27r/ot with frequency fo = fi + chosen to 
produce optimal junction response as explained below. 

Firstly, junction noise becomes photon-assisted be¬ 
cause ac-biasing injects photons in the junction. 

Secondly, statistical correlations between currents at 
/i and /2 as a function of dc voltage showed that pho¬ 
tons generated in pairs in the junction are entangled since 
their correlations violate Bell inequalities as discussed 
below. Defining’’position” Xi,X 2 and’’momentum” op¬ 
erators Pi, P 2 from frequency dependent current opera¬ 
tors J(±/i),/(±/ 2 ) as: 


^ /(/1.2) +/(-/1.2) „ /(/i,2)-/(-/i.2) 

^ 1,2 — -7^-5 - 0,2 — - 


V2 


iV2 


(61) 

we use the QFDT (see section HI | to evaluate the var¬ 
ious quantum correlations versus dc voltage Vdc applied 
to the AI/AI 2 O 3 /AI tunnel junction for a fixed ac volt¬ 
age Vac= 37 /iV in hg. HI Violation of Bell inequalities 
displayed by {X 1 X 2 ) and (P 1 P 2 ) for non-zero 14c indi¬ 
cate entanglement in contrast with the other correlators 
that do not display any variation with t 4 c- (^ 1 X 2)0 and 
(-^ 1 ^ 2)0 that are evaluated for 14 ^ = 0 do not show vi¬ 
olation of Bell inequalities indicating that it is 14c that 
induces quantum correlations thus yielding a simple elec¬ 
trical control parameter for entanglement. 


V. DISCUSSIONS AND CONCLUSIONS 

In this work, the main unifying thread for the descrip¬ 
tion of fluctuations, noise and noise-based communica¬ 
tion is the ubiquitous presence of harmonic oscillators 
represented mostly by photons. 
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FIG. 9. (Color on-line) Correlations in Kelvin units between 
currents at frequencies /i and /2 versus Vdc voltage applied 
to the AI/AI 2 O 3 /AI tunnel junction for a fixed ac voltage 
Vac= 37 /iV. Violation of Bell inequalities is displayed only 
by {X- 1 X 2 ) and {P 1 P 2 } quantum correlations for non-zero ap¬ 
plied ac voltage whereas all other correlators are null including 
(XiX 2 )o and {PiP 2 )o that are evaluated when the ac voltage 
is zero. 

While secure classical noise-based communication uses 
spread-spectrum sequences, secure QC based on QKD 
implemented with entanglement ties communicating par¬ 
ties in a way such that any attempt by some eavesdropper 
to intercept or interfere in the communication process is 
immediately sensed and treated appropriately. 

Entanglement may be done between quantum objects 
such as atoms, electrons, photons etc... however the pre¬ 
ferred information carrier is the photon and the entan¬ 
glement that can be based on polarization, momentum, 
spatial mode or time can be sustained over very large 
distances as demonstrated by the Vienna experiment. 

Heralded entanglement not necessitating a common 
ancestor has even been applied by the same Garchin^^ 
(MPQ) group to transfer a polarization qubit from a pho¬ 
ton to a single atom with 39% efficiency and perform the 
reverse process, that is from the atom to a given pho¬ 
ton with an efficiency of 69%, proving once again that a 
long-distance QC network based on entangled photons is 
a serious contender for secure communication. 

On the other hand, the Sherbrooke experiment shows 
that a major component of noise-based QC is built within 
quantum noise since entanglement is produced in quan¬ 
tum conductors by a simple electrical (ac voltage) con¬ 
trol. 

Even if presently such entanglement occurs at very low 
temperature (18 mK), the result is still important since 
that particular type of entanglement could be exploited 
after appropriate conditioning with quantum cryptogra¬ 
phy techniques in order to secure information transfer 
and communication. 

Presently several secure QC schemes not based on en¬ 
tanglement exist, moreover some other protocols not re¬ 
lying on key generation and distribution have also been 
developed. 

Eor instance QSDC (Quantum Secure Direct Commu¬ 
nication) is a branch of QC in which the message is sent 
directly between remote users without generating a key 
to encrypt it. 


Practicality and robustness of schemes used in QC for 
securing transmission of information will finally decide 
which of the different methods and protocols will be ul¬ 
timately adopted as reliable for secure mass communica¬ 
tion. 


Appendix A: Stochastic processes and Noise 

A stochastic process is a random function of time that 
behaves in a way such that every value ^ it takes is dis¬ 
tributed with a PDE 

00 

{m)= j (Al) 

— 00 

The ensembl^i^ average (...) is taken over the possible 
occurrences of the random function ^{t). 

When the PDE is given by a Boltzmann distribution 
as illustrated in Section II, the ensemble average is called 
thermal: 

00 

m)p = A j (A2) 

— 00 

with A a normalization constant, E the system energy 
and the inverse temperature. 

Time average of ^(t) is defined by: 

T 

^(t) = lim ^ [ ^{t)dt (A3) 

T-f-l-oo 1 J 
0 

In this w ork we assume the validity of the Ergodic the- 
orenJlSHZI that ensures the equivalence of time averaging 
and ensemble averaging. 

The ensemble average of the random function ^^(t) is 
given by: 

00 

(C'W)= J ^^PiC,t)d( (A4) 

— 00 

whereas the mean-squared ensemble average is given by 
(5^^) = (C^(t)) — (C(^))^- The auto-correlation depending 
on two instants ti,t 2 is: 

00 00 

Ti-i'tl.h) = = j J ^1^2P{^l,^2]ti,t2)d^ld^2 

— 00 —00 

(A5) 

withp(^i,^ 2 ;iiji 2 ) representing the two times PDE for 
the distribution of the variables ^ 1 ,^ 2 - 

Note that in the quantum case, ensemble average is 
replaced by quantum average. 
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For a stationary process we have the properties: 
(^(t))= constant, and 7 ^(ti,t 2 ) = R{ti — ^ 2 ), with R a 
function of a single argument in contrast with TZ. 

Taking ti = t and t 2 = t + r we infer that TZ{t,t + T) = 
R{t) is a function of r only meaning it is independent of 
the instant t at which we start observing the process and 
depends only of the interval of time r during which it is 
being observed. 

Actually we have a symmetry under the exchange of 
the time instants fi,f 2 resulting into the property: 

= TZ{t2i ti) = R{\ti — ^ 2 !) (A6) 

Moreover, we expect physically decorrelation of the 
variables ^ 1,^2 the delay separating them increases, 
that is: R{\ti — t 2 \) is a decreasing function of its argu¬ 
ment \ti — < 2 |- 

The Ergodic theorenP^ specifies that ensemble average 
is equivalent to time average in many systems. In glassy 
systems, ergodicity is not valid. 

Stationary noise like any other stochastic process has 
an auto-correlation function TZ{t, t + r) function of only 
T, hence we can use the definition R{t) = TZ{t, t + t) = 
7^(0,r). 

This leads to classifying noise according to its Power 
Spectral Density (PSD) defined as the Fourier transform 
of the auto-correlation function i?(r) = {V{t)V{t + T)) of 
the voltage fluctuations: 

+ 00 

Sv(f) = J exp(-i27r/T)i?(r)dr (A7) 

— 00 

Note that the integral prefactor is 1 whereas in the 
angular frequency case S'v(a;), the prefactor is 27r. 

The inverse Fourier transform yields: 

+ 00 

R{t) = J exp{i2TrfT)Svif)df (A 8 ) 

— 00 

The validity of the direct and inverse Fourier trans¬ 
forms is conditioned by the existence of the respective 
integrals: 

+ 00 +00 

J \R{T)\dT<oo, J \Sv{f)\df<oo (A9) 

— 00 —00 

+ 00 

When T = 0 we get {V{t)V{t)) = i?(0) = / Sv{f)df. 

— 00 

In the case of classical systems, the auto-correlation is 
always real and thus the PSD is always symmetric with 
respect to the frequency. Consequently it is possible to 
rewrite the above formulae as: 


+ 00 

Svif) = 4 y cos(27r/r)i?(T)dT, 

0 

+00 

R{r) = J cos{2tt fT)Sv{f)df (AlO) 

0 

The auto-correlation may also be written as R{t) = 
(P(r)y(O)) — (P)^. A simple classification of Noise is 
possible when the PSD behaves approximately as S{f) ^ 
1//". Consequently we have the following cases: 

• Blue noise: n = —1 or Sv{f) /• This originates 
from the blue glow observed in Cherenkov radiation 
emitted by a charged particle traveling in a dielec¬ 
tric at a velocity larger than light phase velocity in 
that medium. 

• White noise: n = 0 or Sv{f) constant. This is 
noise heard when a radio or TV broadcast station 
has stopped emitting. 

• Pink noise: n = 1 or S'y(/) ~ 1//. 1// noise is 
encountered in many areas of Science and Technol¬ 
ogy. It is called also flicker noise and occurs also in 
music, earthquakes, floods... 

• Brown noise: u = 2 or Svif) ~ 1//^- This is 
analogous to random walk (Brownian motion) and 
the PSD falls faster than 1//. 

• Black noise: n > 2 or Sv{f) ~ !//"• This is the 
opposite of white noise, in the sense that the PSD 
falls off very quickly. 

Appendix B: The classical fluctuation-dissipation 
theorem (FDT) 

Einstein developed in 1905 a theory that explained 
Brownian motion on the basis of the kinetic theory of 
gases. 

The ID motion of the particle is essentially a random 
walk, with steps to right and left as equally probable. 

Einstein suggested that the mean kinetic energy per 
degree of freedom of the particle should be given by sta¬ 
tistical mechanics and the equipartition of energy as: 

= ^ksT (Bl) 

where m is the mass of the particle, v its instantaneous 
velocity component in the x-direction, the mean-squared 
value (u^) is equal to the time average (u^) and Einstein 
did not make a distinction between the two averages as¬ 
suming Ergodicity. 

The displacement x in the x-direction during the time 
interval t. Einstein showed that 

((x - {x)f) = 2Dt (B2) 
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with D the diffusion constant of the particle. 

Let us prove these results directly from a classical equa¬ 
tion of motion extended to comprise random excitation 
terms (Langevin equation): 


OO 

7 = 2rrikBT J 

— OO 


= —av + (B3) 

The viscous term av with coefficient a = Ginja is a 
Stokes term depending on an average damping coefficient 
r] on the particle from irregular impacts on the particle 
with radius a from the surrounding fluid. 

^ (t) is a random term originating from the surrounding 
medium considered as a reservoir at temperature T with 
the following statistical properties: 


(C(t)) = 0 and (C(t)C(iO) = - t') (B4) 

The above Langevin equatiorfi^ contains a time- 
dependent random excitation term ^(t) in an otherwise 
ordinary differential equation (ODE) (see Section II). 

Writing a = my we perform a direct integration of the 
first-order ODE: 


v{t) = VqB -I- 



(B5) 


with vq the initial velocity at t = 0. The average of 
eq. 18 yields (v(t)} = since (^(t))=0. This indi¬ 

cates that 7 is an inverse relaxation time of the initial 
velocity much like IjRC in the circuit encountered in 
Section 11. 

The auto-correlation of the velocity is given by: 


^ exp (- 7 |t - t'l) (B 6 ) 

In order to get the value of A we recall Einstein (asymp¬ 
totic) result of Brownian motion. 

Setting t = t' and identifying ^ with ^ we get the 
value of A. Thus: 


al{t) = ‘^D j = -(1 - e-2'^‘), t > 0 

0 

(B7) 

This means velocity dispersion increases initially with 
time cr^(t) = 2Dt when time t Tr, to finally saturate 
at the value cr^(t) ~ ^ for time t^Tr. 

Taking account of the average kinetic energy {E) = 
m{v{t)‘^)/2 and recalling the equipartition theorem (E) = 
kBT/2, we get 7 = 

Hence we can rewrite the auto-correlation formula as: 


This is the classical fluctuation-dissipation theorem 
with auto-correlation representing fluctuation and fric¬ 
tion coefficient 7 representing dissipation. 


Appendix C: Density of states for particles and 
elementary excitations 


According to KitteP^the density of states of solid-state 
excitations g{oj) in d dimensions for a system of typical 

linear length I is given hy g{uj) = J with 

k integration performed such that w < a;(k) < oj + duj. 
e(k) = fiaj(k) is the energy dispersion, Vg is the group 
velocity modulus of the elementary excitationP^ Vg = 
^|Vke(k)| and dS^^ is the differential area element on 
the constant energy surface a;(k) = w. It is possible to 
generalize this formula to g(a;) = Ap (^) J 

where Np is the number of excitation polarizations. 

When the excitations are real particles (photons, elec¬ 
trons...) and possess a spin S, Np = 2S+1 when the par¬ 
ticles have non-zero mass (electrons) and Np = 2 for zero- 
mass particles (such as photons). E. Wignei!^ showed in 
1939, on the basis of Lorenz invariance, that the photon 
(or any other massless particle with spin S) moves with 
the velocity of light c, even in the center-of-mass frame. 
Exploiting rotational symmetry around c direction yields 
only two polarizations: left or right circular correspond¬ 
ing to ms = ±5' spin eigenstates. 

In the case of elementary excitations (phonons, plas- 
mons, magnons, excitons...) Np = 1 regardless of the 
statistics. 

Specializing to the ’’Debye” case w(k) = t^glkj = Vgk, 
the above expression of the density of the states can be 
expressed analytically since the constant energy surface 
w(k) = w is a hypersphere with radius k = ui/vg and 
surface equal to S^i = sik‘^~^ where si is the unity radius 
hypersphere surface given bjff^si = 2tt'^^'^ /T{d/2). 

Collecting expressions we get g{u}) = Ap (^) thus 


sM = AtoI)(S)‘''' 

In an oscillator, excitations are quantized with aver¬ 
age energy for n quanta as tiuj{{n) -I- 5 ) in the inter¬ 
val [ui^ui + duj]. Multiplying the mean energy by the 
number of quanta (modes) g{uj)diu in this interval yields: 
g{uj)huj{{n) + ^)duj. 


Appendix D: Entropy hierarchy 

In order to establish a hierarchy of information en¬ 
tropies, recall that Shannon entropy is defined (in the 
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discrete probability case) by: 

N 

Hs =-^Pi^og 2 P^ (Dl) 

i=l 

with Pi the probability of occurrence of symbol i and N 
the total number of symbols. 

Guided by Hamming distance well-known in coding 
theorjffl, one might draw an analogy between information 
and distance in order to establish a hierarchy of entropies. 

For any vector x with components Xi,i = its 

distance from origin or norm is defined according to the 
following £p-norm formula: 


The Renyi entropy is additive like Shannon’s and for 
q —)■ 1, they are same: 

N 

= -^Pi log 2 Pi = Hs (D4) 

i=l 

Using the analogy with the Infinity norm £oo, we obtain 
the min-entropy as: 

Roo = - max log 2 p^ (D5) 


1 



Thus: ||a;||i = 1^*1 is the ^i-norm, whereas the 

I 

ordinary Euclidean norm is ||£c ||2 = 

t' 2 -norm. Taking the case p —>■ 00 we get the Infinity 
norm with ||a;||oo = jv Mathematically, 

the three norms are equivalent, however computationally 
wise, £00 norm is the most efficient in terms of number of 
arithmetic operations. 

In the entropy case, we define the order q S [0, oo[ 
Renyi function: 


Rq 




(D3) 


Similarly to the £00 norm, the Renyi entropy is very 
efhcient, computationally wise. 

Considering for an example, Poisson distributed pho- 
ton^lSl, 

with mean in) and probabilities pi = -—, 
Shannon entropy is given by: 

= ^log2(27re(n)) (D6) 

In comparison, the min-entropy is obtained after esti¬ 
mating maxi=i,,jv{pi} and that occurs when i « [(n)J, 
the integer part of (n), thus: 


R 


00 


l0g2 


e 


L(n)J! 


(D7) 


Entropy hierarchy is represented by the inequalities 
0 < Roo < Rq ^ Hs < Rq' (with g > 1 and 0 < g' < 
1). In the case of perfectly random n—bit strings, both 
entropies Hs and Roo per bit are equal to one, since 
Pi = 1/N,yi with iV = 2" and maxi=i,. jv{pi} = 1/iV. 
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